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The invention relates to a method and a device 
making it possible to protect against the copying of 
digital data stored on an information carrier. 

A possibility inherent in digital data is that 
they can be copied without appreciable loss of quality 
since copying consists in transmitting a series of w l"s 
and "0"s from the source to the recorder.' The greatest 
number of errors which may occur when copying can be 
countered by using error correction methods. Thus, when 
an information carrier contains digital data, it is in 
principle relatively simple to record the content of 
the information carrier identically on a recordable 
carrier . 

Numerous types and kinds of information carriers 
are used to store information pf all sorts in digital 
form. For example, a magnetic tape, a recordable or 
non-recordable optical disk (CD, CD-R, CD-RW, DVD, DVD- 
R, magneto-optical disk, etc., respectively , standing 
for Compact Disk, CD-Recordable, CD-Played Write, 
Digital Versatile Disk, DVD-Recordable) can store audio 
and/or video information in digital form. 

In order to better safeguard for example the 
interests of the authors of stored information or those 
of producers of prerecorded information carriers, it is 
desirable to limit the possibilities of freely and 
simply copying the digital data. Various mechanisms and 
possibilities currently exist for protecting digital 
data against illegitimate copying. 

In a known manner, the digital data can be 
encrypted when they are stored on the information 
carrier. Encryption makes it possible to limit the use 
of the digital data to the holder of a public or 
private deciphering key. Encryption is for example used 
in the protection of data on DVDs, optical disks used 
to store video data in digital form. Thus, a DVD player 



requires an appropriate key in order to decrypt the 
data played from the DVD. 

One way of protecting digital data against copying 
consists in furnishing them with a watermark, that is 
to say with auxiliary data attached to the digital 
data. The watermark must be unmodifiable and non- 
erasable. The playing of the data is carried out with 
the aid of a public key which identifies the watermark. 
The public key is a code well known to the public, or 
more precisely contained in most players of information 
carriers. Should the watermarked digital data be 
copied, a private key is required in order to put the 
watermark back in place on the copy, failing which the 
copy becomes illegal devoid as it is of watermark. The 
private key is held by the author or the producer of 
the information thus watermarked. The digital data 
copied without watermark are no longer played by the 
player since the latter does not identify any 
watermarking where it ought to find one. Thus, the 
watermark precludes copying without the private key. If 
a copy is necessary then the recorder must build in 
this private key. 

Watermarking does not prevent the copying of the 
digital data by an analog route, that is to say copying 
which would firstly require conversion of the digital 
data into an analog signal and which would take the 
analog signal as the source of the copy. 

A known solution for preventing the copying of a 
digital carrier by an analog route and more 
particularly in the field of video and television 
consists in corrupting the analog signal in such a way 
that it can be used to display an image on the screen 
of a television set by way of an analog input of this 
television set, but so that the same signal cannot be 
used to make a copy with a video recorder. More 
precisely, an electronic circuit is employed to 
influence image synchronization parameters. These 
^ synchronization parameters are perceived differently by 
a television set and by a video recorder. This solution 
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does not make it possible to prevent the digital 
copying of digital data. 

Another solution for limiting digital copies of 
digital data consists in furnishing the latter with 
5 copy generation management information. In principle, 
this information item conveys the information item 
"never copy" for data which do not have the right to be 
copied and the information item "copy" or "copy number 
X" if the data are a first generation or X-th 
10 generation copy of an original. Thus, a recorder can, 
with the aid of these information items, ascertain 
whether the digital data to be copied have the right to 
be copied digitally and prevent copying if it is 
prohibited for the 2nd or (X+lth) generation. The copy 
15 generation management information item is updated with 
each copy. This manipulation of the copy generation 
management information item renders it vulnerable to 
falsification. Specifically, the copy generation 
management information item is at one stage of copying 
20 available as plaintext, that is to say in decrypted 
form. The manipulation also requires the digital 
recorder to be equipped accordingly. The copy 
generation management information item does not by 
itself make it possible to prevent copying by an analog 
25 route. 

An object of the invention consists in finding a 
solution for protection against digital copying in 
which no information item relating to the generation of 
copy is available as plaintext when copying. 
30 Another object of the invention consists in 

finding a solution in which no modification of data 
relating to protection against copying is undertaken 
upon the possible recording of a copy. 

A solution proposed by the invention envisages a 
35 method of protection against the copying of digital 
data stored on an information carrier, comprising 

a first identification of an encryption of the 
digital data, 
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a second identification of a watermarking of 

digital data, 

a first determination of a first mark if it has 
been possible to identify the encryption and the 
watermarking, 

a third identification of a type of the 

information carrier, 

a second determination of a second mark if it has 
been possible to determine the first mark and if it has 
been possible to identify a determined type of 
information carrier, 

a fourth identification of cryptographic signature 
data accompanying the digital data, 

a third determination of a third mark if it has 
been possible to determine the second mark and if it 
has been possible to identify a cryptographic signature 
datum, 

a first delivery of a permission for digital 
copying of the digital data if it has been possible to 
determine the third mark. 

A first advantageous implementation of the 
invention envisages a second delivery of a prohibition 
of playing of the digital data if the first 
identification is negative and if it has been possible 
to identify the watermarking, or if it has been 
possible to identify the encryption and the second 
identification is negative, 

A second advantageous implementation of the 
invention envisages a third delivery of a permission 
for digital copying of the digital data if the first 
and second identifications are negative. 

A third advantageous implementation of the 
invention envisages a fourth delivery of a prohibition 
of digital copying of the digital data if it has been 
possible to determine the first mark and if the third 
identification reveals a different type from the 
determined type of information carrier. 

A fourth advantageous implementation of the 
invention envisages a fifth delivery of a prohibition 
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of digital copying of the digital data if it has been 
possible to determine the second mark and if the fourth 
identification is negative. 

A fifth advantageous implementation of the 
5 invention envisages a conversion of the digital data 
into analog signals and a corruption of the analog 
signals if the first, the fourth or the fifth delivery 
has been implemented. 

A sixth advantageous implementation of the 
10 invention envisages that the prohibition of digital 
copying comprises a blocking of output of the digital 
data. 

Another solution proposed by the invention 
envisages a device for playing digital data stored on 
15 an information carrier comprising at least, 

a digital output for providing signals 
representative of the digital data upon playing the 
digital data, 

an analog output for providing analog signals 
20 representative of the digital data upon playing the 
digital data, 

a decryption system for the digital data making it 
possible in particular to establish whether the digital 
data are encrypted and, if so, to decrypt the encrypted 
25 digital data, to identify whether the digital data 
comprise a watermark and/or cryptographic signature 
data, and to identify a type of the information 
carrier, 

a system for protection against the copying of 
30 digital data receiving signals from the decryption 
system so as to evaluate them, and generating a copy 
permission signal in the case where the digital data 
are encrypted, have a watermark, are on a carrier of 
non-recordable type and possess cryptographic signature 
35 data, 

a recording control part which makes it possible 
to manage a stream of digital data heading for the 
digital output when it receives in particular a copy 
permission signal, 
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a playing proteccicn system receiving signals from 
the decryption system and generating a playing 
prohibition signal when the digital data are not 
encrypted but watermarked, or when the digital data are 
5 encrypted but not watermarked, 

a playing control part for interrupting the 
playing of the data or their output to the analog 
output when it receives in particular a playing 
prohibition signal. 
10 i n what follows, exemplary implementations are 

presented which will illustrate the invention and 
provide a better understanding thereof, while referring 
to figures 1 to 8, briefly described hereinbelow: 

Fig- 1 contains a flowchart illustrating an 
15 embodiment of the invention, 

Figs. 2 to 5 contain flowcharts illustrating 
aspects of the invention, 

Fig. 6 contains a flowchart illustrating a 
digital/analog conversion according to the invention, 
20 Fig. 7 contains a diagram illustrating a device 

according to the invention. 

Fig. 1 contains a flowchart in which digital data 
stored on an information carrier 1 are subjected to a 
first identification of an encryption 2 so as to verify 
25 whether the digital data are stored in encrypted form, 
then to a second identification of a watermark 3 so as 
to see whether the data are provided with a digital 
watermark. A first bifurcation 4 makes it possible to 
distinguish the cases in which an encryption is 
30 identified 5 or not 6. A second bifurcation 7 makes it 
possible to distinguish the cases in which a 
watermarking is identified 8 or not 9. If cases 5 and 8 
are indeed verified, a first determination 10 generates 

a first mark #1- 
35 a third identification 11 of a type of the 
information carrier 1 serves to see whether the 
information carrier is for example of the : non- 
recordable or recordable type. An information', item 
regarding the type can be contained in the digital data 
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per se or result from physical measurements of 
parameters of the information carrier 1 during for 
example installation in a player of the information 
carrier 1. A third bifurcation 12 makes it possible to 
distinguish the cases in which the type might be a 
determined type 13, for example a non-recordable 
information carrier such as a pressed optical disk, or 
not 14. If case 13 is indeed verified and the first 
mark #1 has been generated, then a second determination 
15 generates a second mark #2. 

A fourth identification 16 of cryptographic 
signature data verifies whether the digital data 
possess a cryptographic signature. A fourth bifurcation 
17 makes it possible to distinguish the cases in which 
the cryptographic signature is present 18 or not 19. If 
case 18 is indeed verified and the second mark #2 has 
been generated, then a third determination 20 generates 
a third mark #3. 

In the presence of the third mark #3, a first 
delivery 21 of permission for digital copying 22 of the 
digital data is implemented. 

Overall, the flowchart of Fig. 1 shows how various 
criteria pertaining to the digital data and also to the 
information carrier can lead to the delivery of 
permission for digital copying, the idea being to allow 
copying only under defined conditions. For example, the 
data should not have been manipulated and hence should 
be encrypted and watermarked. Next, the data should not 
yet have been copied. If the data are on a non- 
recordable disk then a priori the data are on an 
original information carrier. Finally, the data should 
possess a cryptographic signature. The latter indicates 
that the data can be copied. It is then that the data 
receive the permission for digital copying. A result of 
the copying of the data will be identical to the 
original except as regards the information carrier 
which will^ have to be recordable. A new copy of the 
data from* 'the recordable information carrier would be 
impossible since the second mark #2 could not be 
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generated after the third identification 11. 
Specifically, the third bifurcation 12 would lead us to 
case 14. 

Other exemplary cases need to be considered when 
5 for example the encryption or the watermarking of the 
digital data cannot be identified. Normally, encryption 
and watermarking go hand in hand and the absence of one 
or the other is evidence of illicit manipulation of the 
digital data. It is then necessary to go further than 
10 simply prohibiting the copying of the digital data. The 
playing of the latter must be prevented. 

A flowchart in Fig. 2 illustrates two exemplary 
cases in which the encryption and the watermarking are 
not identified together. An exemplary case envisages 
15 that the first bifurcation 4 yields case 6, that is to 
say that the first identification of an encryption is 
negative, and that the second bifurcation 7 yields case 
8, that is to say that a watermark is present. Then a 
second delivery 23 generates a prohibition of playing 
20 of the digital data 24. In practice, this could for 
example lead to an interruption of the playing of the 
data. Another exemplary case envisages that the first 
bifurcation 4 yields case 5, that is to say an 
encryption is identified, and that the second 
bifurcation 7 yields case 9, that is to say that the 
second identification of a watermark is negative. In 
this other case the second delivery generates the 
prohibition of playing 24. 

The method described allows to freely copy digital 
30 data which are not protected, for example data devoid 
of encryption and of watermark. Fig. 3 contains a 
flowchart in which the first and the second bifurcation 
4 and 7 each yield a case of negative identification 
respectively cases 6 in respect of encryption and 9 in 
35 respect of watermarking. A third delivery 25 then 
directly generates the digital copying permission 22. 

In the last case it matters little whether the 
data are on a recordable or non-recordable information 
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carrier. The absence of encryption and of watermarking 
indicates a minimum level of data protection. 

In certain exemplary cases it has to be possible 
to play and utilize the data but not to copy them. This 
5 is the case in particular when one purchases an 
information carrier containing digital data, the 
copying of which the author or the producer wishes to 
prevent. This is also the case when a recordable 
information carrier containing legally copied data is 
10 played. Such a case is illustrated with the aid of a 
flowchart in Fig. 4 where a fourth delivery 26 verifies 
that the first mark #1 has been delivered and that case 
14 of identification of a type of information carrier 
different from the determined type has occurred before 
15 generating a prohibition of copying 27. In practice, 
the player would have to employ a device preventing 
copying of the digital data, for example by disabling a 
digital output of the player. 

Another such case is illustrated with the aid of a 
20 flowchart in Fig. 5. If the second mark #2 is 
identified and case 19 signals a fourth negative 
identification, that is to say that no cryptographic 
signature permitting copying of the data is present, 
then a fifth delivery 28 generates the prohibition of 

25 copying 27. 

Of course the fact that no cryptographic signature 
permitting copying of the data is identified does not 
exclude the presence of a particular cryptographic 
signature prohibiting copying. 
30 Throughout the description, mention, has already 

been made of the fact that the information carrier 1 is 
used in an appropriate player. The digital data stored 
on the information carrier 1 can in certain cases be 
conveyed to a digital output of the player. In the 
35 example of a DVD (optical disk for video/audio digital 
data) player, a digital output can be provided in order 
to output a signal representative of the data to a DVD- 
r (or other) player/recorder for Copying purposes, or 
to a computer to carry out image processing. In 
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general, the player also provides an analog output so 
as to be able to transmit an analog signal 
representative of the digital data to the analog input 
for example of a television set. 
5 A flowchart in Fig. 6 indicates with a dashed 

arrow that the information carrier yields digital data 
29. A conversion 30 makes it possible to convert the 
digital data 29 into analog signals 31. A presence of 
the permission for digital copying 22 together with any 
10 one of the first, second or third marks (#1, #2, #3), 
or a presence of the prohibition of digital copying 27, 
is detected in a detection 32 which as appropriate 
triggers a corruption 33 of the analog signals so as to 
obtain corrupted analog signals 34. The analog signals 
15 are for example corrupted in such a way that they can 
be used to obtain images on a television but that it is 
impossible to copy them with the aid of a video 
recorder with an analog input. 

Advantageously there is envisaged a blocking at a 
20 digital output of the player of the digital data 35 in 
the presence of the prohibition of digital copying 27. 

The encryption of the digital data on the 
information carrier is normally performed on the 
producer side. 

25 The digital data as well as the cryptographic 

signature which may be associated therewith are 
decrypted in the data player. However, when these data 
have to be transmitted on a digital output of the 
player, the data are encrypted. 
30 . A device for playing digital data 42, illustrated 

in Fig. 7, comprises a digital output 43 which provides 
signals representative of the digital data upon playing 
the digital data of an information carrier. This output 
4 3 can for example be implemented with the aid of a 
35 digital bus to the IEEE1394 standard. An analog output 
44 provides analog signals representative of the same 
digital data. A decryption system 4 5 makes it possible 
to decrypt digital data if the latter are encrypted, 
but also to identify any watermark and cryptographic 
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signature data. The decryption system makes it possible 
to accomplish for example the identifications 2, 3, 11 
and 16 of the method illustrated in Fig. 1. 

A system for protection against copying of the 
5 digital data 46 uses signals transmitted by the 
decryption system 4 5 and evaluates them by implementing 
the determinations 10, 15 and 20 of the method 
illustrated in Fig. 1 and delivers, after having 
determined the marks #1, #2 and #3, a copy permission 
10 signal. 

A recording control part 47 manages a stream of 
digital data heading for the digital output. This part, 
when it obtains the copy permission signal from the 
protection system 46, can in particular activate the 
15 stream. 

The system for protection against copying of the 
digital data 46 can also play the role of a system for 
protection against playing. With the aid of the signals 
received from the decryption system 4 5, the latter 
20 system generates a playing prohibition signal when the 
digital data are not encrypted but watermarked or else 
when the digital data are encrypted but not 
watermarked. 

A playing control part 48 makes it possible to 
25 interrupt the playing of the digital data when it 
receives the prohibition signal from the playing 
protection system 46. 
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